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IN THE SPECIFICATION: 

[0007] Memory 402 103 stores sender instructions 104 that are adapted to be executed by 
processor 102 to perform at least part of the method in accordance with an embodiment of the 
present invention. For example, sender instructions 104 can provide a sender Graphical User 
Interface (GUI) to a user at sender 101, through which the user can identify electronic content 
(e.g., a file of any type, including software, music, audio, video, etc.) to transfer to a recipient, 
and specify a transfer parameter, e.g., mandate that the transferred file be persistently written 
only to a CD at the recipient; mandate that the transferred file cannot be further copied from the 
memory device on which it is to be stored at the recipient; etc. Such transfer parameters can be 
communicated to a server 106 by "sending instructions" that can be generated by sender 
instructions 104 and sent from the sender 101 to the server 106. Sender instructions 104 can 
cause the selected content itself to be sent through network 105 to server 106. 

[0009] Server 106 can include a processor 107 coupled to memory 108, which stores processing 
instructions 109. Processing instructions 109 can be executed by processor 4-0& 107 to perform at 
least part of the method in accordance with an embodiment of the present invention. For 
example, processing instructions 109 can send a message to recipient 1 10 through network 105, 
where the message announces to a user at recipient 1 10 that content sent from sender 101 can be 
downloaded by recipient 1 10, e.g., by selecting a link included in the message. 

[0020] User A utilizes his browser to visit a web site that implements an embodiment of the 
present invention, e.g., http:// e chospin.com <http://echospin.com> . There he clicks on a link 
labeled "send a CD". Clicking on this link initiates an auto-install process, e.g., using a signed 
ActiveX control that is installed into the browser, and launches the installation process. Sender 
instructions (also, "sender software") can thereby be installed on the sender (User A) computer. 

[0025] Once the package has been received at the server, the sender software can present a 
message to User A indicating that the package has been successfully sent. The server can 
examine and verify the data that User A has sent. The server can search its user database to see if 
User B already has an account. If not, then the server can advantageously create a new account in 
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anticipation of User B. As requested by User A, two notifications, one via e-mail and the other 
via IM, can be sent from the server to User B. Each notification can inform User B that User A 
has sent him a CD entitled "Bach's Unaccompanied Cello Suites," and can include User A's text 
note. The message can also contain a hyperlink that points to the server and includes a token, 
e.g., http://wwvv. e chospin.com/ uniqu e tok e n <http://www.echospin.com/- unique-token> ; 
e chospin.com/application?tok e n-uniqu e tok e n <echospin.com/application?token=unique- 
token>; http://uniquo tok e n. e chospin.com <http://unique-token.echospin.com> ; etc. The token 
can be unique to the notification message (e.g., different for the e-mail and IM messages) and be 
stored in the server's database. This unique token can be linked to User B's account; and/or to all 
or part of the package. The notification can inform User B that in order to receive the package, 
User B must click on the hyperlink. 

[0029] Figure 3 shows a graphical user interface (GUI) 300 that can be presented to a user at 
sender computer 101 in accordance with sender instructions 104 executing on sender processor 
102. The GUI provides an opportunity for the user to select a particular memory device 301 on 
which content (e.g., a file) to be transferred from the sender 101 to the recipient 1 10 may be 
stored. In this example, the sending user can specify that the content be permitted to be stored on 
a CD-ROM at the recipient 1 10; a flash memory card at the recipient 110; and/or a hard disk at 
the recipient 1 10. This selection by the sending user can be mandatory, and can be enforced by 
recipient instructions 113. For example, recipient processor 1 1 1 can include tamper resistant 
features, such as those proposed by the Trusted Computing Group (see 
<www.trustedcomputinggroup.com>) and set forth in the Trusted Computing Group, Main 
Specification, Version 1.1a. See 

https://www.trust e dcomputinggroup.org/dovvnloads/tcg_sp e c.sub. 1 .sub. lb .zip 
<https://www.trustedcomputinggroup.org/downloads/tcg spec.sub.--l.sub.--lb- .zip> . Recipient 
1 10 can also store and execute trusted software such as that proposed and developed by the 
Microsoft Corporation of Redmond, Wash, pursuant to the Palladium Next-Generation Secure 
Computing Base for Windows. See 
http://www.microsoftxom/pr e sspass/f e a^ 

<http://www.microsoft.com/presspass/features/2002/iul02/0724palladiumwp.^ Recipient 
instructions can execute in conjunction with trusted hardware and software at the recipient 1 10 to 
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reliably implement transfer parameters specified by the sending user through the sender GUI 
300. Thus, for example, if the sending user specifies that the content to be transferred from the 
sender 101 to the recipient 110 through server 106 can only be stored on a CD-ROM or flash 
memory at the recipient 110, then the recipient instructions 113 can be trusted not to store the 
transferred content to, for example, a hard disk at the recipient 1 10. 

[003 1] The sending user may also specify a digital rights management control 303 that mandates 
that no more than a given number of copies may be made of the file from the second memory 
device. In this embodiment, the recipient instructions 1 13 can mandate that a copy may only be 
made if permission is provided by instructions 113 executing on processor 111, and maintain a 
counter that is incremented each time a copy is authorized. When the counter reaches the given 
number, no further authorizations to copy are granted. 
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